Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Suppress errors on the OpenSSL error stack
P11PROV_raise() emits errors in the openssl error stack. The OpenSSL TLS code checks the error stack and fails TLS operations if any error is found on the stack. Change pkcs11-provider code to not emit on the openssl error stack when operations fail, as sometimes that is expected and the code can still complete the overall requested operation via fallbacks. The code now emits only a debug error, which is routed to the pkcs11-provider debug file and does not poison the OpenSSL error stack. NOTE: This requires a change in a test. As we change the errors we throw on the Stack OpenSSL interprests the error differently and prints a different error message. Signed-off-by: Simo Sorce <[email protected]>
- Loading branch information